This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa File: VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa (raw, json) Hash identifier: Cecy3QpWVDEErZPxgAgQ0Koma/ZxEa66HTh9jYt45cI= Subject key identifier: 55:4C:F4:B5:21:42:5F:F0:51:15:31:06:14:E6:A1:CC:CF:19:A5:FD Certificate issuer: /CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Certificate serial: 019B7E3878D87A7E3CF4D334BD251EE2D00E Authority key identifier: 67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa Signing time: Fri 02 Jan 2026 10:19:48 +0000 ROA not before: Fri 02 Jan 2026 10:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25252 IP address blocks: 170.102.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.mft rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:78:d8:7a:7e:3c:f4:d3:34:bd:25:1e:e2:d0:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=673b3a71cf772755a3df8ced5d73516f871c0a11 Validity Not Before: Jan 2 10:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=554cf4b521425ff05115310614e6a1cccf19a5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:c0:1d:1c:4e:fa:bb:b8:9a:a4:5c:9c:d7: 08:6a:56:b1:34:25:3d:75:5f:9d:00:17:c5:67:93: 29:ae:39:49:f0:ba:c6:c5:dc:1c:48:03:4d:d7:84: d3:ba:cc:dc:e6:91:1d:42:29:46:bb:1e:30:6d:d5: 26:e7:5f:4b:c2:f7:a0:c4:ee:4b:11:b8:9d:ae:4e: 12:87:38:59:e1:6a:8c:60:ca:47:51:2e:4f:78:d0: 89:45:24:29:7d:34:ca:6f:37:c4:5a:33:48:37:2c: f0:56:5e:fb:31:05:27:47:f0:bf:0e:22:6e:e9:ca: c6:3d:36:b4:4a:8c:08:29:d8:68:a6:eb:e0:52:af: 43:dc:e3:5e:b6:a6:d1:90:b5:e4:dd:d4:70:23:94: 97:bf:24:f4:c3:76:41:9e:1e:d4:f2:c5:86:b4:68: 54:35:57:11:4b:a8:a4:98:3c:ea:90:77:d9:47:d6: 10:63:cf:61:a4:bb:4f:2c:40:dc:e3:bd:eb:2f:4e: 47:15:91:de:d6:07:3b:bd:f3:84:53:bc:23:6e:03: 4a:72:d0:9a:05:23:9d:dc:f6:bd:61:22:46:33:7e: d6:45:c1:49:b0:77:a5:72:84:4e:36:e3:90:29:09: 82:e8:52:d9:f1:e1:15:77:58:f5:16:05:59:b4:83: 0e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4C:F4:B5:21:42:5F:F0:51:15:31:06:14:E6:A1:CC:CF:19:A5:FD X509v3 Authority Key Identifier: keyid:67:3B:3A:71:CF:77:27:55:A3:DF:8C:ED:5D:73:51:6F:87:1C:0A:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zzs6cc93J1Wj34ztXXNRb4ccChE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/VUz0tSFCX_BRFTEGFOahzM8Zpf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c94855-5b1a-4f96-b7a1-6fe1f294e627/1/Zzs6cc93J1Wj34ztXXNRb4ccChE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.102.196.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:9a:23:b8:cd:33:03:68:10:e4:3a:fe:48:6b:cb:4f:36:b9: 22:d1:fe:48:ce:b5:d7:a1:cc:2b:55:74:0a:41:39:21:a7:d8: 0a:74:7c:3f:c9:0f:f1:b2:1b:35:42:11:cc:78:e3:da:3f:db: 01:0d:f2:55:de:01:5c:04:c6:c8:dc:e9:5d:b8:e6:cb:5f:be: dc:ac:3c:57:55:1c:a9:17:1a:f7:41:e5:a2:0b:cf:7b:ab:82: 05:0d:11:4b:37:6b:46:91:82:7e:17:d9:c5:02:84:92:9d:d6: df:9d:6e:10:c6:06:f0:6c:8b:eb:ce:fd:f5:73:05:50:1f:99: 94:50:ee:6f:31:7a:bd:2b:ac:2d:e4:57:99:31:70:1b:8d:8d: 16:87:a9:c7:24:75:68:90:7d:86:2a:9c:9b:01:40:2b:ef:d0: d5:23:6c:cf:f1:72:86:e2:97:75:c6:5e:d2:0e:d3:88:86:d8: 30:c9:46:08:33:64:80:c9:5b:2b:a3:1a:0a:0e:fd:c8:52:47: 31:e8:bc:ac:04:8a:47:63:b9:aa:0c:05:31:d3:16:3c:e5:23: 05:07:2e:65:83:74:7e:96:df:1c:c1:6c:63:26:6d:c4:c3:38: b1:65:87:43:01:bb:f5:57:dd:54:02:9f:27:b0:17:bc:4e:94: b1:55:23:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHjYen489NM0vSUe4tAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3M2IzYTcxY2Y3NzI3NTVhM2RmOGNlZDVkNzM1MTZmODcx YzBhMTEwHhcNMjYwMTAyMTAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTRjZjRiNTIxNDI1ZmYwNTExNTMxMDYxNGU2YTFjY2NmMTlhNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxXAHRxO+ru4mqRcnNcIalaxNCU9 dV+dABfFZ5MprjlJ8LrGxdwcSANN14TTuszc5pEdQilGux4wbdUm519LwvegxO5L Ebidrk4ShzhZ4WqMYMpHUS5PeNCJRSQpfTTKbzfEWjNINyzwVl77MQUnR/C/DiJu 6crGPTa0SowIKdhopuvgUq9D3ONetqbRkLXk3dRwI5SXvyT0w3ZBnh7U8sWGtGhU NVcRS6ikmDzqkHfZR9YQY89hpLtPLEDc473rL05HFZHe1gc7vfOEU7wjbgNKctCa BSOd3Pa9YSJGM37WRcFJsHelcoRONuOQKQmC6FLZ8eEVd1j1FgVZtIMOvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFVM9LUhQl/wURUxBhTmoczPGaX9MB8GA1UdIwQY MBaAFGc7OnHPdydVo9+M7V1zUW+HHAoRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEt NmZlMWYyOTRlNjI3LzEvVlV6MHRTRkNYX0JSRlRFR0ZPYWh6TThacGYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9jOTQ4NTUtNWIxYS00Zjk2LWI3YTEtNmZlMWYyOTRlNjI3 LzEvWnpzNmNjOTNKMVdqMzR6dFhYTlJiNGNjQ2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmbEMA0G CSqGSIb3DQEBCwUAA4IBAQCbmiO4zTMDaBDkOv5Ia8tPNrki0f5IzrXXocwrVXQK QTkhp9gKdHw/yQ/xshs1QhHMeOPaP9sBDfJV3gFcBMbI3OlduObLX77crDxXVRyp Fxr3QeWiC897q4IFDRFLN2tGkYJ+F9nFAoSSndbfnW4QxgbwbIvrzv31cwVQH5mU UO5vMXq9K6wt5FeZMXAbjY0Wh6nHJHVokH2GKpybAUAr79DVI2zP8XKG4pd1xl7S DtOIhtgwyUYIM2SAyVsroxoKDv3IUkcx6LysBIpHY7mqDAUx0xY85SMFBy5lg3R+ lt8cwWxjJm3EwzixZYdDAbv1V91UAp8nsBe8TpSxVSMo -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:56 2026 by rpki-client